mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add defualt pass rule on lan interface and remove it from config.

Browse Source 
It is a default policy so lets keep it with defaults and let the user override it when pleases.
This commit is contained in:
Ermal Luçi 2008-02-01 21:58:21 +00:00
parent 448f4e1128
commit 23ffac28fa
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
etc/inc/filter.inc
View File

@ -2328,6 +2328,11 @@ function filter_rules_generate() {
block in $log all label "Default deny rule"
block out $log all label "Default deny rule"
#--------------------------------------------------------------------------
# default LAN pass rule
#--------------------------------------------------------------------------
pass in on \$lan from $lan:network to any keep state
# We use the mighty pf, we cannot be fooled.
block quick proto { tcp, udp } from any port = 0 to any
block quick proto { tcp, udp } from any to any port = 0